Lucene search
K

5 matches found

CNNVD
CNNVD
added 2025/12/24 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from vdpa's lack of policy validation of queue index attributes, which could lead to out-of-bounds reads...

6.1AI score0.00031EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/07 12:0 a.m.3 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the lack of nlapolicy validation of the vdpa functional attribute, which could lead to out-of-bounds reads...

5.9AI score0.00014EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/08/22 12:0 a.m.3 views

PT-2025-34390

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel's vdpa/mlx5 component related to the release of uninitialized resources during error handling. Specifically, the mlx5 vdpa destroy mr resources and ml...

8.5CVSS6.2AI score0.00153EPSS
Exploits5References767
BDU FSTEC
BDU FSTEC
added 2024/09/03 12:0 a.m.1 views

The vulnerability of the vdpa component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the vdpa component in the Linux operating system’s kernel is related to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00061EPSS
Exploits0References7Affected Software3
RedHat Linux
RedHat Linux
added 2024/04/30 9:57 a.m.3 views

kernel: vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check

An out-of-bounds read vulnerability was found in the Linux kernel's vDPA virtio Data Path Acceleration netlink interface. The vdpanlpolicy structure was missing the nlapolicy entry for the queue index attribute. Without proper validation, parsing netlink messages with this attribute could result ...

6.4AI score0.00031EPSS
Exploits0References5
Rows per page
Query Builder